[ 83.217237][ T40] audit: type=1400 audit(1769039344.703:118): avc: denied { transition } for pid=6146 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.226958][ T40] audit: type=1400 audit(1769039344.703:119): avc: denied { noatsecure } for pid=6146 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.237601][ T40] audit: type=1400 audit(1769039344.703:120): avc: denied { rlimitinh } for pid=6146 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 83.245255][ T40] audit: type=1400 audit(1769039344.703:121): avc: denied { siginh } for pid=6146 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:24999' (ED25519) to the list of known hosts. 2026/01/21 23:49:12 parsed 1 programs [ 91.322490][ T40] audit: type=1400 audit(1769039352.803:122): avc: denied { node_bind } for pid=6208 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 91.716339][ T53] cfg80211: failed to load regulatory.db [ 93.867412][ T40] audit: type=1400 audit(1769039355.353:123): avc: denied { read write } for pid=6223 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.878312][ T40] audit: type=1400 audit(1769039355.353:124): avc: denied { open } for pid=6223 comm="syz-executor" path="/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 93.905730][ T40] audit: type=1400 audit(1769039355.393:125): avc: denied { unlink } for pid=6223 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 94.300410][ T40] audit: type=1400 audit(1769039355.783:126): avc: denied { relabelto } for pid=6226 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 95.173651][ T6223] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.419937][ T6234] chnl_net:caif_netlink_parms(): no params data found [ 97.668002][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.670991][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.674140][ T6234] bridge_slave_0: entered allmulticast mode [ 97.677406][ T6234] bridge_slave_0: entered promiscuous mode [ 97.685084][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.687927][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.690848][ T6234] bridge_slave_1: entered allmulticast mode [ 97.695161][ T6234] bridge_slave_1: entered promiscuous mode [ 97.756309][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.767340][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.857644][ T6234] team0: Port device team_slave_0 added [ 97.959785][ T6234] team0: Port device team_slave_1 added [ 98.084449][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.087403][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.104321][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.147657][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.150560][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.160127][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.165538][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.167300][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.174107][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.177776][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.180749][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.309291][ T6234] hsr_slave_0: entered promiscuous mode [ 98.312451][ T6234] hsr_slave_1: entered promiscuous mode [ 98.502838][ T40] audit: type=1401 audit(1769039359.983:127): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 99.058299][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.060817][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.085282][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.100492][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.477515][ T6234] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.483011][ T6234] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.488439][ T6234] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.492827][ T6234] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.553339][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.568463][ T6234] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.577284][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.580903][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.594371][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.597538][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.658701][ T40] audit: type=1400 audit(1769039361.143:128): avc: denied { sys_module } for pid=6234 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 99.762101][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.796152][ T6234] veth0_vlan: entered promiscuous mode [ 99.802995][ T6234] veth1_vlan: entered promiscuous mode [ 99.822354][ T6234] veth0_macvtap: entered promiscuous mode [ 99.826914][ T6234] veth1_macvtap: entered promiscuous mode [ 99.835740][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.842828][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.849882][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.853639][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.858187][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.861827][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/01/21 23:49:21 executed programs: 0 [ 99.980883][ T5294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.986112][ T5294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.990502][ T5294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.994980][ T5294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.004045][ T5294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.009974][ T6369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.009982][ T5294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.010597][ T5294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.014527][ T6369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.018239][ T5294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.019811][ T6369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.022351][ T5294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.028123][ T6369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.028509][ T5294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.031804][ T6369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.087465][ T5294] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.092791][ T5294] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.102370][ T5294] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.105266][ T91] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.116218][ T5294] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.119422][ T5294] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.214758][ T91] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.306383][ T91] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.408145][ T91] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.670783][ T6358] chnl_net:caif_netlink_parms(): no params data found [ 100.767841][ T6359] chnl_net:caif_netlink_parms(): no params data found [ 100.780893][ T6373] chnl_net:caif_netlink_parms(): no params data found [ 100.861458][ T6364] chnl_net:caif_netlink_parms(): no params data found [ 100.912659][ T6358] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.916131][ T6358] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.919003][ T6358] bridge_slave_0: entered allmulticast mode [ 100.922813][ T6358] bridge_slave_0: entered promiscuous mode [ 101.004197][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.013839][ T6358] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.016878][ T6358] bridge_slave_1: entered allmulticast mode [ 101.020835][ T6358] bridge_slave_1: entered promiscuous mode [ 101.184098][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.187014][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.189859][ T6359] bridge_slave_0: entered allmulticast mode [ 101.193605][ T6359] bridge_slave_0: entered promiscuous mode [ 101.208372][ T6358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.268468][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.271684][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.275606][ T6359] bridge_slave_1: entered allmulticast mode [ 101.280319][ T6359] bridge_slave_1: entered promiscuous mode [ 101.332160][ T6358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.336527][ T6373] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.339552][ T6373] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.342149][ T6373] bridge_slave_0: entered allmulticast mode [ 101.346657][ T6373] bridge_slave_0: entered promiscuous mode [ 101.430774][ T6373] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.433866][ T6373] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.436543][ T6373] bridge_slave_1: entered allmulticast mode [ 101.440556][ T6373] bridge_slave_1: entered promiscuous mode [ 101.447110][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.498346][ T6364] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.500940][ T6364] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.504783][ T6364] bridge_slave_0: entered allmulticast mode [ 101.508910][ T6364] bridge_slave_0: entered promiscuous mode [ 101.514918][ T6358] team0: Port device team_slave_0 added [ 101.520616][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.531369][ T6373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.537615][ T6364] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.540883][ T6364] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.544315][ T6364] bridge_slave_1: entered allmulticast mode [ 101.548265][ T6364] bridge_slave_1: entered promiscuous mode [ 101.553113][ T6358] team0: Port device team_slave_1 added [ 101.597869][ T6373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.751830][ T6373] team0: Port device team_slave_0 added [ 101.755783][ T6364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.760087][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.762576][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.772190][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.777878][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.780867][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.790690][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.797474][ T6359] team0: Port device team_slave_0 added [ 101.804263][ T6364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.810559][ T6373] team0: Port device team_slave_1 added [ 101.821335][ T6359] team0: Port device team_slave_1 added [ 101.957929][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.961046][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.972128][ T6373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.998604][ T6364] team0: Port device team_slave_0 added [ 102.053520][ T6373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.056778][ T6373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.068378][ T6373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.075015][ T6364] team0: Port device team_slave_1 added [ 102.078892][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.082185][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.093090][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.102348][ T6358] hsr_slave_0: entered promiscuous mode [ 102.106922][ T6358] hsr_slave_1: entered promiscuous mode [ 102.111051][ T6358] debugfs: 'hsr0' already exists in 'hsr' [ 102.115142][ T6366] Bluetooth: hci2: command tx timeout [ 102.115148][ T64] Bluetooth: hci0: command tx timeout [ 102.115153][ T5294] Bluetooth: hci1: command tx timeout [ 102.122233][ T6358] Cannot create hsr debugfs directory [ 102.182955][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.186130][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.195944][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.204045][ T64] Bluetooth: hci3: command tx timeout [ 102.235328][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.238717][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.249343][ T6364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.255980][ T6364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.258996][ T6364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.270629][ T6364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.349687][ T6373] hsr_slave_0: entered promiscuous mode [ 102.352286][ T6373] hsr_slave_1: entered promiscuous mode [ 102.356038][ T6373] debugfs: 'hsr0' already exists in 'hsr' [ 102.358492][ T6373] Cannot create hsr debugfs directory [ 102.427237][ T6359] hsr_slave_0: entered promiscuous mode [ 102.429727][ T6359] hsr_slave_1: entered promiscuous mode [ 102.432154][ T6359] debugfs: 'hsr0' already exists in 'hsr' [ 102.435178][ T6359] Cannot create hsr debugfs directory [ 102.591216][ T6364] hsr_slave_0: entered promiscuous mode [ 102.595094][ T6364] hsr_slave_1: entered promiscuous mode [ 102.598571][ T6364] debugfs: 'hsr0' already exists in 'hsr' [ 102.600970][ T6364] Cannot create hsr debugfs directory [ 102.875998][ T91] bridge_slave_1: left allmulticast mode [ 102.878346][ T91] bridge_slave_1: left promiscuous mode [ 102.880839][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.886459][ T91] bridge_slave_0: left allmulticast mode [ 102.888333][ T91] bridge_slave_0: left promiscuous mode [ 102.890517][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.140220][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.148194][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.153604][ T91] bond0 (unregistering): Released all slaves [ 103.299979][ T91] hsr_slave_0: left promiscuous mode [ 103.302902][ T91] hsr_slave_1: left promiscuous mode [ 103.309077][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.312144][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.316975][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.319523][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.336550][ T91] veth1_macvtap: left promiscuous mode [ 103.338753][ T91] veth0_macvtap: left promiscuous mode [ 103.341023][ T91] veth1_vlan: left promiscuous mode [ 103.343273][ T91] veth0_vlan: left promiscuous mode [ 103.864965][ T91] team0 (unregistering): Port device team_slave_1 removed [ 103.920240][ T91] team0 (unregistering): Port device team_slave_0 removed [ 104.194341][ T64] Bluetooth: hci2: command tx timeout [ 104.194352][ T6366] Bluetooth: hci1: command tx timeout [ 104.194654][ T6366] Bluetooth: hci0: command tx timeout [ 104.274000][ T6366] Bluetooth: hci3: command tx timeout [ 105.411432][ T6373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.418361][ T6373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.429420][ T6373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.449817][ T6373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.510067][ T6358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.522079][ T6358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.528927][ T6358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.535976][ T6358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.627494][ T6364] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.635059][ T6364] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.642815][ T6364] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.651591][ T6364] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.723353][ T6373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.769558][ T6359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.779860][ T6359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.789499][ T6359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.807276][ T6373] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.810088][ T6359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.837808][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.840260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.856411][ T6358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.862264][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.864954][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.902261][ T6364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.916487][ T6358] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.941472][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.944568][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.951524][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.954848][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.991055][ T6364] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.019232][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.022270][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.039687][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.042681][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.106972][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.141482][ T6359] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.162808][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.166383][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.188784][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.191860][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.270293][ T6373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.284626][ T6366] Bluetooth: hci2: command tx timeout [ 106.284674][ T5294] Bluetooth: hci1: command tx timeout [ 106.289218][ T64] Bluetooth: hci0: command tx timeout [ 106.331405][ T6373] veth0_vlan: entered promiscuous mode [ 106.344932][ T6358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.351589][ T6373] veth1_vlan: entered promiscuous mode [ 106.363921][ T64] Bluetooth: hci3: command tx timeout [ 106.416002][ T6358] veth0_vlan: entered promiscuous mode [ 106.428424][ T6373] veth0_macvtap: entered promiscuous mode [ 106.442255][ T6373] veth1_macvtap: entered promiscuous mode [ 106.448995][ T6358] veth1_vlan: entered promiscuous mode [ 106.454126][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.488465][ T6364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.507365][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.517055][ T6373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.531477][ T6432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.536515][ T6432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.542951][ T6432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.547753][ T6432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.553040][ T6359] veth0_vlan: entered promiscuous mode [ 106.574272][ T6358] veth0_macvtap: entered promiscuous mode [ 106.591286][ T6359] veth1_vlan: entered promiscuous mode [ 106.614336][ T6358] veth1_macvtap: entered promiscuous mode [ 106.647425][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.651521][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.692090][ T6364] veth0_vlan: entered promiscuous mode [ 106.698050][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.702079][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.707224][ T6359] veth0_macvtap: entered promiscuous mode [ 106.713284][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.723679][ T6359] veth1_macvtap: entered promiscuous mode [ 106.729909][ T6358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.733463][ T6364] veth1_vlan: entered promiscuous mode 2026/01/21 23:49:28 executed programs: 8 [ 106.752039][ T95] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.760459][ T40] audit: type=1400 audit(1769039368.253:129): avc: denied { create } for pid=6546 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.771292][ T95] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.775620][ T95] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.781481][ T40] audit: type=1400 audit(1769039368.273:130): avc: denied { ioctl } for pid=6546 comm="syz.3.20" path="socket:[12222]" dev="sockfs" ino=12222 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 106.792965][ T95] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.810128][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.831713][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.841590][ T6364] veth0_macvtap: entered promiscuous mode [ 106.860057][ T1183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.870718][ T6432] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.878986][ T6432] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.887215][ T6432] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.890432][ T6364] veth1_macvtap: entered promiscuous mode [ 106.931021][ T6432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.939721][ T6432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.971334][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.994177][ T6432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.997352][ T6432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.997591][ T6364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.067146][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.070905][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.089223][ T95] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.092017][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.098710][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.101705][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.170882][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.177788][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.254944][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.258269][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.320479][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.333776][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.061745][ T6733] ================================================================== [ 108.065059][ T6733] BUG: KASAN: slab-use-after-free in nr_rt_ioctl+0x2583/0x29b0 [ 108.067789][ T6733] Read of size 4 at addr ffff88802fd5b130 by task syz.0.94/6733 [ 108.072593][ T6733] [ 108.074141][ T6733] CPU: 2 UID: 0 PID: 6733 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 108.074164][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.074176][ T6733] Call Trace: [ 108.074183][ T6733] [ 108.074191][ T6733] dump_stack_lvl+0x116/0x1f0 [ 108.074221][ T6733] print_report+0xcd/0x630 [ 108.074246][ T6733] ? __virt_addr_valid+0x81/0x610 [ 108.074263][ T6733] ? __phys_addr+0xe8/0x180 [ 108.074280][ T6733] ? nr_rt_ioctl+0x2583/0x29b0 [ 108.074301][ T6733] kasan_report+0xe0/0x110 [ 108.074326][ T6733] ? nr_rt_ioctl+0x2583/0x29b0 [ 108.074348][ T6733] nr_rt_ioctl+0x2583/0x29b0 [ 108.074372][ T6733] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 108.074405][ T6733] ? bpf_lsm_capable+0x9/0x10 [ 108.074427][ T6733] ? security_capable+0x7e/0x260 [ 108.074450][ T6733] nr_ioctl+0x19a/0x2d0 [ 108.074466][ T6733] sock_do_ioctl+0x118/0x280 [ 108.074490][ T6733] ? __pfx_sock_do_ioctl+0x10/0x10 [ 108.074518][ T6733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.074540][ T6733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.074569][ T6733] sock_ioctl+0x227/0x6b0 [ 108.074595][ T6733] ? __pfx_sock_ioctl+0x10/0x10 [ 108.074620][ T6733] ? hook_file_ioctl_common+0x144/0x410 [ 108.074641][ T6733] ? selinux_file_ioctl+0x180/0x270 [ 108.074664][ T6733] ? selinux_file_ioctl+0xb4/0x270 [ 108.074689][ T6733] ? __pfx_sock_ioctl+0x10/0x10 [ 108.074715][ T6733] __x64_sys_ioctl+0x18e/0x210 [ 108.074737][ T6733] do_syscall_64+0xcd/0xf80 [ 108.074762][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.074782][ T6733] RIP: 0033:0x7fc7beb8efc9 [ 108.074796][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.074813][ T6733] RSP: 002b:00007fc7be1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.074832][ T6733] RAX: ffffffffffffffda RBX: 00007fc7bede5fa0 RCX: 00007fc7beb8efc9 [ 108.074844][ T6733] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 108.074855][ T6733] RBP: 00007fc7bec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.074866][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.074876][ T6733] R13: 00007fc7bede6038 R14: 00007fc7bede5fa0 R15: 00007ffd36c67648 [ 108.074894][ T6733] [ 108.074900][ T6733] [ 108.172245][ T6733] Allocated by task 6726: [ 108.174271][ T6733] kasan_save_stack+0x33/0x60 [ 108.176291][ T6733] kasan_save_track+0x14/0x30 [ 108.178319][ T6733] __kasan_kmalloc+0xaa/0xb0 [ 108.180265][ T6733] nr_add_node+0xe4e/0x2c00 [ 108.182313][ T6733] nr_rt_ioctl+0x11b7/0x29b0 [ 108.184522][ T6733] nr_ioctl+0x19a/0x2d0 [ 108.186424][ T6733] sock_do_ioctl+0x118/0x280 [ 108.188474][ T6733] sock_ioctl+0x227/0x6b0 [ 108.190322][ T6733] __x64_sys_ioctl+0x18e/0x210 [ 108.192362][ T6733] do_syscall_64+0xcd/0xf80 [ 108.194116][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.196280][ T6733] [ 108.197104][ T6733] Freed by task 6733: [ 108.198486][ T6733] kasan_save_stack+0x33/0x60 [ 108.200126][ T6733] kasan_save_track+0x14/0x30 [ 108.201735][ T6733] kasan_save_free_info+0x3b/0x60 [ 108.203454][ T6733] __kasan_slab_free+0x5f/0x80 [ 108.205240][ T6733] kfree+0x2f8/0x6e0 [ 108.206629][ T6733] nr_rt_ioctl+0xbed/0x29b0 [ 108.208119][ T6733] nr_ioctl+0x19a/0x2d0 [ 108.209612][ T6733] sock_do_ioctl+0x118/0x280 [ 108.211251][ T6733] sock_ioctl+0x227/0x6b0 [ 108.212663][ T6733] __x64_sys_ioctl+0x18e/0x210 [ 108.214395][ T6733] do_syscall_64+0xcd/0xf80 [ 108.215955][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.218008][ T6733] [ 108.218881][ T6733] The buggy address belongs to the object at ffff88802fd5b100 [ 108.218881][ T6733] which belongs to the cache kmalloc-64 of size 64 [ 108.224044][ T6733] The buggy address is located 48 bytes inside of [ 108.224044][ T6733] freed 64-byte region [ffff88802fd5b100, ffff88802fd5b140) [ 108.229663][ T6733] [ 108.230636][ T6733] The buggy address belongs to the physical page: [ 108.233200][ T6733] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802fd5b300 pfn:0x2fd5b [ 108.236670][ T6733] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 108.239316][ T6733] page_type: f5(slab) [ 108.240974][ T6733] raw: 00fff00000000000 ffff88801b4428c0 ffffea0000d824c0 dead000000000007 [ 108.244076][ T6733] raw: ffff88802fd5b300 000000008020001e 00000000f5000000 0000000000000000 [ 108.247217][ T6733] page dumped because: kasan: bad access detected [ 108.249929][ T6733] page_owner tracks the page as allocated [ 108.252102][ T6733] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1144, tgid 1144 (kworker/u32:6), ts 22985456678, free_ts 22985437321 [ 108.258741][ T6733] post_alloc_hook+0x1af/0x220 [ 108.260446][ T6733] get_page_from_freelist+0xd0b/0x31a0 [ 108.262377][ T6733] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 108.264418][ T6733] alloc_pages_mpol+0x1fb/0x550 [ 108.266445][ T6733] new_slab+0x2c3/0x430 [ 108.268228][ T6733] ___slab_alloc+0xe18/0x1c90 [ 108.270366][ T6733] __slab_alloc.constprop.0+0x63/0x110 [ 108.272855][ T6733] __kmalloc_node_noprof+0x4d8/0x930 [ 108.275131][ T6733] __vmalloc_node_range_noprof+0x405/0x16b0 [ 108.277805][ T6733] __vmalloc_node_noprof+0xad/0xf0 [ 108.280075][ T6733] copy_process+0x619/0x7430 [ 108.282227][ T6733] kernel_clone+0xfc/0x910 [ 108.284111][ T6733] user_mode_thread+0xc8/0x110 [ 108.286144][ T6733] call_usermodehelper_exec_work+0xcb/0x170 [ 108.288615][ T6733] process_one_work+0x9ba/0x1b20 [ 108.290709][ T6733] worker_thread+0x6c8/0xf10 [ 108.292658][ T6733] page last free pid 1144 tgid 1144 stack trace: [ 108.295439][ T6733] __free_frozen_pages+0x7df/0x1170 [ 108.297687][ T6733] __kasan_populate_vmalloc+0x149/0x220 [ 108.299815][ T6733] alloc_vmap_area+0x98d/0x2a50 [ 108.301397][ T6733] __get_vm_area_node+0x1ca/0x330 [ 108.303225][ T6733] __vmalloc_node_range_noprof+0x247/0x16b0 [ 108.305460][ T6733] __vmalloc_node_noprof+0xad/0xf0 [ 108.307465][ T6733] copy_process+0x619/0x7430 [ 108.308937][ T6733] kernel_clone+0xfc/0x910 [ 108.310374][ T6733] user_mode_thread+0xc8/0x110 [ 108.311893][ T6733] call_usermodehelper_exec_work+0xcb/0x170 [ 108.313811][ T6733] process_one_work+0x9ba/0x1b20 [ 108.315366][ T6733] worker_thread+0x6c8/0xf10 [ 108.316863][ T6733] kthread+0x3c5/0x780 [ 108.318225][ T6733] ret_from_fork+0x983/0xb10 [ 108.319782][ T6733] ret_from_fork_asm+0x1a/0x30 [ 108.321354][ T6733] [ 108.322119][ T6733] Memory state around the buggy address: [ 108.323953][ T6733] ffff88802fd5b000: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 108.326618][ T6733] ffff88802fd5b080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 108.329658][ T6733] >ffff88802fd5b100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 108.332388][ T6733] ^ [ 108.334503][ T6733] ffff88802fd5b180: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 108.336930][ T6733] ffff88802fd5b200: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 108.339488][ T6733] ================================================================== [ 108.342099][ T6733] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.344430][ T6733] CPU: 2 UID: 0 PID: 6733 Comm: syz.0.94 Not tainted syzkaller #0 PREEMPT(full) [ 108.347344][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.350745][ T6733] Call Trace: [ 108.351808][ T6733] [ 108.352753][ T6733] dump_stack_lvl+0x3d/0x1f0 [ 108.354321][ T6733] vpanic+0x640/0x6f0 [ 108.355626][ T6733] panic+0xca/0xd0 [ 108.356876][ T6733] ? __pfx_panic+0x10/0x10 [ 108.358417][ T6733] ? check_panic_on_warn+0x1f/0xb0 [ 108.360143][ T6733] check_panic_on_warn+0xab/0xb0 [ 108.361747][ T6733] end_report+0x107/0x160 [ 108.363169][ T6733] kasan_report+0xee/0x110 [ 108.364612][ T6733] ? nr_rt_ioctl+0x2583/0x29b0 [ 108.366196][ T6733] nr_rt_ioctl+0x2583/0x29b0 [ 108.367786][ T6733] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 108.369732][ T6733] ? bpf_lsm_capable+0x9/0x10 [ 108.371398][ T6733] ? security_capable+0x7e/0x260 [ 108.373166][ T6733] nr_ioctl+0x19a/0x2d0 [ 108.374820][ T6733] sock_do_ioctl+0x118/0x280 [ 108.376309][ T6733] ? __pfx_sock_do_ioctl+0x10/0x10 [ 108.378004][ T6733] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 108.379782][ T6733] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 108.382151][ T6733] sock_ioctl+0x227/0x6b0 [ 108.383576][ T6733] ? __pfx_sock_ioctl+0x10/0x10 [ 108.385311][ T6733] ? hook_file_ioctl_common+0x144/0x410 [ 108.387090][ T6733] ? selinux_file_ioctl+0x180/0x270 [ 108.388977][ T6733] ? selinux_file_ioctl+0xb4/0x270 [ 108.391435][ T6733] ? __pfx_sock_ioctl+0x10/0x10 [ 108.393436][ T6733] __x64_sys_ioctl+0x18e/0x210 [ 108.395259][ T6733] do_syscall_64+0xcd/0xf80 [ 108.397034][ T6733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.399336][ T6733] RIP: 0033:0x7fc7beb8efc9 [ 108.400810][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.407861][ T6733] RSP: 002b:00007fc7be1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 108.410797][ T6733] RAX: ffffffffffffffda RBX: 00007fc7bede5fa0 RCX: 00007fc7beb8efc9 [ 108.413772][ T6733] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004 [ 108.417032][ T6733] RBP: 00007fc7bec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 108.419855][ T6733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.422469][ T6733] R13: 00007fc7bede6038 R14: 00007fc7bede5fa0 R15: 00007ffd36c67648 [ 108.425405][ T6733] [ 108.427420][ T6733] Kernel Offset: disabled [ 108.428919][ T6733] Rebooting in 86400 seconds..